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6) |EI Claim(s) 1-31 is/are rejected. 
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DETAILED ACTION 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the phor art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-31 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Sandhu et al (U.S. 6,985,953) and Devine et al (U.S. 6,606,708). 

As per claims 1,14 Sandhu disclosed a method of processing a first request for web page, 
comprising: receiving the first request for the web page (col. 3, liens 12-18) The process is 
initiated when an Internet or Intranet user (e.g., "http client) sends a transmission requesting 
certain information, e.g., request for an Http file from a Http server;. 

However Sandhu did not disclose in detail transmitting, to a device from which the first request 
was received, at least one command to send a second request for the web page, and a first 
timestamp. 

In the same field of endeavor Devine disclosed, "Upon receipt of the request, the cookie jar 
service request, the cookie jar service "marks" the session record with a time stamp indicating 
the most recent time the client communicated to the server using the heart beat (col. 21, lines 23- 
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26). Failure to "heartbeat" for consecutive predefined period, e.g., one hour would result in the 
expiration of the session key (col. 21, lines 47-48). One ordinary skill in the art at the time of 
the invention knows that session key contains the time stamp and these session key can be 
predefined for certain time period. Therefore the when the same client sends a second request 
containing the session key it will check for the expiration time stamp as long the time stamp is 
valid and not expired the server processes the second request otherwise it clears the request. In 
the case of the second, third and fourth request they all get processed as long it contains the 
same session key meaning having the same valid time stamp. 

It would have been obvious to one having ordinary skill in the art at the time of the invention 
was made to have incorporated Upon receipt of the request, the cookie jar service request, the 
cookie jar service "marks" the session record with a time stamp indicating the most recent time 
the client communicated to the server using the heart beat. Failure to "heartbeaf for consecutive 
predefined period, e.g., one hour would result in the expiration of the session key as taught by 
Devine in the method and system of Sandhu to provide secure network system and also reduce 
cost and latency by predefining the time period for authentication. 

3. As per claims 2,15 Sandhu-Devine disclosed wherein the transmitting step is responsive 
to an existence of a second timestamp received with the request (Devine, col. 19, lines 63-67 & 
col. 20, lines 1-7). 
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4. As per claim 3,16,28 Sandhu-Devine disclosed comprising the additional steps of: 
identifying a third timestamp; and responsive to the second timestamp received with the request, 
processing the request for the web page responsive to the second timestamp and the third 
timestamp (Devine, col. 19, lines 63-67 & col. 20, lines 1-7). 

5 . As per claims 4,17 Sandhu-Devine disclosed wherein the identifying the third timestamp 
step is responsive to a capacity of at least one selected from at least one server and a device 
coupled to the at least one server (Devine, col. 19, lines 40-46). 

6. As per claims 5,18 Sandhu-Devine disclosed incrementing at least one of a plurality of 
counters responsive to the first request (Devine, col. 19, lines 63-67 & col. 20, lines 1-7). 

7. As per claims 6,19 Sandhu-Devine disclosed wherein each of the plurality of counters 
corresponds to a range of time different from the other plurality of counters (Devine, col. 21, 
lines 47-48). 

8. As per claims 7,20 Sandhu-Devine disclosed wherein the identifying the third timestamp 
step is additionally responsive to at least one of the plurality of counters (Devine, col. 19, lines 
20-28). 
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9. As per claims 8,21 Sandhu-Devine disclosed comprising the additional steps of receiving 
a notification of abandonment of at least one selected from the first request and the second 
request; and decrementing at least one of the plurality of counters (Devine, col. 21, lines 47-48) 

10. As per claims 9,10,22,23 Sandhu-Devine disclosed wherein the identifying the third 
timestamp step comprises sending a command to at least one selected from at least one server 
and a device coupled to the at least one server (Devine, col. 21, lines 26-35). 

11. As per claims 1 1 ,24 Sandhu-Devine disclosed wherein the transmitting step is responsive 
to a type of the first request (Devine, col. 19, lines 20-24). 

12. As per claims 12,25,30 Sandhu-Devine additionally comprising transmitting computer 
readable program code devices configured to cause a computer to send the second request 
responsive to the indicator transmitted (Devine, col. 20, lines 48-63). 

13. As per claims 13,26,3 1 Sandhu-Devine disclosed wherein the computer readable program 
code devices configured to cause the computer to send the second request responsive to the 
indicator transmitted comprise at least one selected from a Java script and a Java applet (Devine, 
col. 3, lines 1-9). 

14. As per claim 27 Sandhu-Devine disclosed a user request router having an input coupled 
to an apparatus input operatively coupled for receiving the first request, the user request router 
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for providing at an output a signal responsive to the first request received at the user request 
router input (Devine, col. 24, lines 44-55); and a cookie/applet generator having an input coupled 
to the user request router output for receiving the signal, the cookie/applet generator for 
providing a first output coupled to an apparatus output a first indicator of at least one time to 
send a second request for the web page (Devine, col. 25, lines 32-46). 

15. As per claim 29 Sandhu-Devine disclosed wherein the cookie/applet generator provides 
at a second output a third indicator of time corresponding to the first indicator of time, the 
apparatus additionally comprising: a stroke count storage for having an input coupled to the 
cookie/applet generator third output for receiving the third indicator of time (Devine, Devine, 
col. 19, lines 63-67 & col. 20, lines 1-7), the stroke count storage for storing the third indicator of 
time and a set of fourth indicators of time and for providing the third indicator of time and the set 
of fourth indicators of time at an input/output; and a cutoff timestamp calculator having an input 
operatively coupled for receiving an indicator of capacity (Devine, col. 21, lines 23-26 & col. 21, 
lines 47-48), the cutoff timestamp calculator for selecting and providing at an output a timestamp 
from the set of fourth indicators of time responsive to the capacity; and wherein the user request 
router additionally comprises a cutoff timestamp input coupled to the cutoff timestamp calculator 
output and the user request router provides the signal additionally responsive to the timestamp 
received at the cutoff timestamp input (Devine, col. 24, lines 44-59). 



Response to Arguments 
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Applicant's arguments with respect to claim 1-3 1 have been considered but are moot in view of 
the new ground(s) of rejection. 

Conclusion 

16. Any inquiry concerning this communication or earlier communication from the examiner 
should be directed to Adnan Mirza whose telephone number is (571)-272-3885. 

17. The examiner can normally be reached on Monday to Friday during normal business 
hours. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Vivek Srivastava can be reached on (571)-272-7304. The fax for this group is (703)- 
746-7239. The fax phone number for the organization where this application or proceeding is 
assigned is 571-273-8300. 

18. Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for un published 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http ://pair-direct.uspto . gov . Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at (866)-2 17-9 197 (toll-free). 
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